Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
File: AtboJz-QUawxy5V5LLUUANq3FKo.mft (raw, json)
Hash identifier: aybikLxxPRsrBrb3icfvM7s9G/hYPXp8mDWmJZJIW9Y=
Subject key identifier: CD:86:38:1E:52:76:7B:07:19:28:44:E3:D1:E8:70:2E:31:5E:D0:C1
Authority key identifier: 02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
Certificate issuer: /CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Certificate serial: 01988EECC2DB07F433C6C76A246ED15D8406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 13:02:17 +0000
Manifest this update: Sat 09 Aug 2025 13:02:17 +0000
Manifest next update: Sun 10 Aug 2025 13:02:17 +0000
Files and hashes: 1: 7BZ6n-mqQeS7WvxbzQcDTyMPPGA.roa (hash: A/dQyVGugZPPzzKbUernmnmEYkigB1EDFhlRwxZgoK0=)
2: AtboJz-QUawxy5V5LLUUANq3FKo.crl (hash: +TlZLRAn2o1Evq7revRsv0BhDLs3yScE87QFSfAw/Kg=)
3: TqDzXylobmv5YZZYBBs97jYKvU0.roa (hash: NHV6Fswg/e8zrywVYBxwjK/JaW1VOFVPHkfR6/mh8w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:c2:db:07:f4:33:c6:c7:6a:24:6e:d1:5d:84:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Validity
Not Before: Aug 9 13:02:17 2025 GMT
Not After : Aug 10 13:02:17 2025 GMT
Subject: CN=cd86381e52767b07192844e3d1e8702e315ed0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b3:29:48:83:cf:10:ac:c4:9c:0a:e6:c2:62:
92:40:ba:61:f9:88:be:15:67:a3:65:3f:7c:4d:13:
2f:40:78:a2:13:b6:97:1a:fa:f5:71:66:12:56:33:
cc:1b:5f:c3:fe:b5:5e:00:d5:2a:05:cb:32:fd:30:
43:e9:51:84:63:ef:0c:b3:9b:4e:ed:d9:cf:0d:89:
15:fb:c4:57:af:20:d3:af:f4:22:dc:cb:0a:e2:2f:
aa:32:04:1c:24:60:b8:a0:98:db:ff:39:20:f0:f8:
18:67:36:e4:4b:77:dd:ef:3e:71:67:93:1e:57:0c:
e3:36:b2:3f:d4:c1:0d:42:ac:0c:d4:72:cf:68:66:
ec:02:1e:66:85:0b:33:cc:f7:68:48:09:d2:b4:49:
de:6f:5e:4e:7b:33:ab:fe:12:2c:0c:aa:a1:f5:c6:
b8:e0:3b:77:98:10:37:9f:88:f1:15:86:6a:83:8e:
0e:35:15:e8:82:39:fe:6f:5b:c0:1d:49:ca:95:f1:
bf:e0:f1:5d:b1:ca:ee:5a:ea:e0:1a:04:1e:3e:a2:
38:72:ac:9a:0a:cf:0e:10:14:45:3a:43:03:3f:e5:
f9:eb:46:91:1e:25:db:71:78:29:b6:51:f3:88:f3:
83:a1:85:8a:69:de:66:eb:ab:42:76:61:6a:7b:d5:
b1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:86:38:1E:52:76:7B:07:19:28:44:E3:D1:E8:70:2E:31:5E:D0:C1
X509v3 Authority Key Identifier:
keyid:02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c4:f1:e0:d6:00:29:96:1d:e2:c0:9a:99:41:95:34:9c:c9:
7a:a8:0f:29:56:38:25:c7:ba:db:eb:94:f5:07:ba:e6:8f:61:
f4:ac:32:63:e2:87:0a:70:1c:d7:ee:c2:8e:f6:c5:64:e4:ee:
08:02:9e:38:87:7c:e2:c1:16:fd:10:0c:bd:12:9a:fb:c4:a0:
00:e2:dd:e7:44:e5:26:8f:51:eb:4e:4e:c3:15:4f:a9:2d:ae:
2c:da:fc:2e:eb:51:be:78:27:77:bf:71:64:08:19:fa:9c:95:
a5:31:e9:be:25:14:7e:22:af:64:8f:a3:fe:4b:28:d4:5b:9e:
b0:a7:bb:c8:f6:5b:b5:5e:7f:15:26:8d:8f:c3:c0:3d:a1:e6:
77:9b:d1:ca:2e:6b:ca:13:97:cb:42:ec:bb:92:02:53:42:6b:
f8:31:1e:c1:cc:df:fb:c1:37:dc:fb:57:99:b8:36:f1:8a:0d:
f2:d2:8d:5f:da:6d:f2:c6:8b:8e:df:f8:05:72:35:03:ef:34:
98:5b:23:30:d8:a1:2e:80:52:31:d4:0e:12:7e:a2:ef:2c:90:
3d:44:ad:76:bf:c7:f5:79:4d:4c:2d:18:b7:87:47:36:77:61:
6a:0e:04:9b:01:ff:43:0b:bf:c0:11:63:4b:b1:82:2e:da:86:
19:3c:cd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:36:11 2025 by rpki-client